openxiangda-contracts 2.34.0 → 2.43.0

package/dist/types.d.ts

@@ -5,6 +5,7 @@ import type { CascadePathValue, DataFieldOption, DateRangeValue, DepartmentRefer
 import type { DataFieldResourceSource } from "./references.js";
 import type { WorkflowBusinessData } from "./workflow-summary.js";
 import type { WorkflowBusinessDetail } from "./workflow-detail.js";
+import type { WorkflowBusinessStepNode, WorkflowBusinessStepResult } from './native-compiler/workflow-business-step.js';
 import type { AppWorkflowLaunchContextDeclaration, AppWorkflowLaunchInputBindingDeclaration, AppWorkflowNamedOperationOutputDeclaration } from "./native.js";
 import { type CliProtocolCapabilities } from "./cli.js";
 export declare const OPENXIANGDA_CONTRACT_VERSION: "2.0.0-alpha.5";
@@ -24,6 +25,10 @@ export declare const SCHEMA_VERSIONS: {
     readonly roleSubjectPage: "openxiangda.role-subject-page/v2";
     readonly runtimeAuthorization: "openxiangda.runtime-authorization/v2";
     readonly nativeRoleMembershipPage: "openxiangda.native-role-membership-page/v2";
+    readonly nativeRoleMembershipBatchRequest: "openxiangda.native-role-membership-batch-request/v2";
+    readonly nativeRoleMembershipBatchResult: "openxiangda.native-role-membership-batch-result/v2";
+    readonly workflowRoleReferencePage: "openxiangda.workflow-role-reference-page/v2";
+    readonly nativeRoleManagementScopeValuePage: "openxiangda.native-role-management-scope-value-page/v2";
     readonly nativeAuthorizationManagementCatalog: "openxiangda.native-authorization-catalog/v2";
     readonly nativeRoleManagementGrantPage: "openxiangda.native-role-management-grant-page/v2";
     readonly nativeAuthorizationMutationReceipt: "openxiangda.native-authorization-mutation-receipt/v2";
@@ -93,6 +98,10 @@ export declare const SCHEMA_VERSIONS: {
     readonly workflowCommandInput: "openxiangda.workflow-command-input/v2";
     readonly workflowLaunchSurface: "openxiangda.workflow-launch-surface/v3";
     readonly workflowDelegation: "openxiangda.workflow-delegation/v2";
+    readonly workflowDelegationAdministration: "openxiangda.workflow-delegation-administration/v2";
+    readonly workflowDelegationMutationRequest: "openxiangda.workflow-delegation-mutation/v2";
+    readonly workflowDelegationMutationPreview: "openxiangda.workflow-delegation-preview/v2";
+    readonly workflowDelegationMutationReceipt: "openxiangda.workflow-delegation-receipt/v2";
     readonly workflowAssigneeProvider: "openxiangda.workflow-assignee-provider/v2";
     readonly workflowAssigneeRequest: "openxiangda.workflow-assignee-request/v2.1";
     readonly workflowAssigneeResponse: "openxiangda.workflow-assignee-response/v2";
@@ -439,6 +448,23 @@ export interface NativeAuthorizationManagementCatalog {
     roleManagement: NativeRoleManagementAuthority;
     scopeDimensions: NativeAuthorizationManagementScopeDimension[];
 }
+export interface NativeRoleManagementScopeValuePage {
+    schemaVersion: typeof SCHEMA_VERSIONS.nativeRoleManagementScopeValuePage;
+    environment: {
+        id: string;
+        key: DeploymentEnvironment;
+        headRevision: number;
+        authzRevisionId: string;
+        scopeDataVersion: string;
+    };
+    dimensionCode: string;
+    items: Array<{
+        id: string;
+        label: string;
+    }>;
+    limit: number;
+    offset: number;
+}
 export interface NativeRoleMembership {
     id: string;
     environmentId: string;
@@ -1515,7 +1541,7 @@ export interface CloudEvent<TData extends Record<string, unknown> = Record<strin
 }
 export declare const DATA_EVENT_TYPES_V2: readonly ["openxiangda.data.record.created.v2", "openxiangda.data.record.updated.v2", "openxiangda.data.record.deleted.v2"];
 export type DataEventTypeV2 = (typeof DATA_EVENT_TYPES_V2)[number];
-export declare const WORKFLOW_EVENT_TYPES_V2: readonly ["openxiangda.workflow.instance.started.v2", "openxiangda.workflow.instance.completed.v2", "openxiangda.workflow.instance.rejected.v2", "openxiangda.workflow.instance.returned.v2", "openxiangda.workflow.instance.resumed.v2", "openxiangda.workflow.instance.withdrawn.v2", "openxiangda.workflow.instance.terminated.v2", "openxiangda.workflow.instance.cc_added.v2", "openxiangda.workflow.task.created.v2", "openxiangda.workflow.task.assigned.v2", "openxiangda.workflow.task.assignment_pending.v2", "openxiangda.workflow.task.assignment_resolution_failed.v2", "openxiangda.workflow.task.approved.v2", "openxiangda.workflow.task.completed.v2", "openxiangda.workflow.task.rejected.v2", "openxiangda.workflow.task.returned.v2", "openxiangda.workflow.task.resubmitted.v2", "openxiangda.workflow.task.transferred.v2", "openxiangda.workflow.task.reassigned.v2", "openxiangda.workflow.task.delegated.v2", "openxiangda.workflow.task.assignee_added.v2", "openxiangda.workflow.task.cancelled.v2", "openxiangda.workflow.participant.activated.v2", "openxiangda.workflow.participant.completed.v2", "openxiangda.workflow.participant.rejected.v2", "openxiangda.workflow.participant.returned.v2", "openxiangda.workflow.participant.transferred.v2", "openxiangda.workflow.participant.reassigned.v2", "openxiangda.workflow.participant.delegated.v2", "openxiangda.workflow.participant.added.v2", "openxiangda.workflow.participant.suspended.v2", "openxiangda.workflow.participant.resumed.v2", "openxiangda.workflow.participant.cancelled.v2"];
+export declare const WORKFLOW_EVENT_TYPES_V2: readonly ["openxiangda.workflow.step.requested.v2", "openxiangda.workflow.step.result_received.v2", "openxiangda.workflow.step.completed.v2", "openxiangda.workflow.step.continuation_failed.v2", "openxiangda.workflow.instance.started.v2", "openxiangda.workflow.instance.completed.v2", "openxiangda.workflow.instance.rejected.v2", "openxiangda.workflow.instance.returned.v2", "openxiangda.workflow.instance.resumed.v2", "openxiangda.workflow.instance.withdrawn.v2", "openxiangda.workflow.instance.terminated.v2", "openxiangda.workflow.instance.cc_added.v2", "openxiangda.workflow.task.created.v2", "openxiangda.workflow.task.assigned.v2", "openxiangda.workflow.task.assignment_pending.v2", "openxiangda.workflow.task.assignment_resolution_failed.v2", "openxiangda.workflow.task.approved.v2", "openxiangda.workflow.task.completed.v2", "openxiangda.workflow.task.rejected.v2", "openxiangda.workflow.task.returned.v2", "openxiangda.workflow.task.resubmitted.v2", "openxiangda.workflow.task.transferred.v2", "openxiangda.workflow.task.reassigned.v2", "openxiangda.workflow.task.delegated.v2", "openxiangda.workflow.task.assignee_added.v2", "openxiangda.workflow.task.cancelled.v2", "openxiangda.workflow.participant.activated.v2", "openxiangda.workflow.participant.completed.v2", "openxiangda.workflow.participant.rejected.v2", "openxiangda.workflow.participant.returned.v2", "openxiangda.workflow.participant.transferred.v2", "openxiangda.workflow.participant.reassigned.v2", "openxiangda.workflow.participant.delegated.v2", "openxiangda.workflow.participant.added.v2", "openxiangda.workflow.participant.suspended.v2", "openxiangda.workflow.participant.resumed.v2", "openxiangda.workflow.participant.cancelled.v2"];
 export type WorkflowEventTypeV2 = (typeof WORKFLOW_EVENT_TYPES_V2)[number];
 export type EventProducerKind = "data" | "app" | "workflow" | "timer" | "date" | "system";
 export interface EventCatalogEntry {
@@ -1652,6 +1678,10 @@ export type EventFilterCondition = {
     not: EventFilterCondition;
 };
 export interface EventSubscriptionFilter {
+    /** Fixed versioned handler; only valid for workflow step request events. */
+    workflowStep?: {
+        handlerCode: string;
+    };
     resourceCodes?: string[];
     subject?: EventSubjectFilter;
     changedFields?: EventChangedFieldsFilter;
@@ -1728,6 +1758,7 @@ export interface EventReceiptCommand {
     eventId: string;
     deliveryId: string;
     claimToken?: string;
+    workflowStepResult?: WorkflowBusinessStepResult;
 }
 export interface EventReceiptResult {
     schemaVersion: typeof SCHEMA_VERSIONS.eventReceiptResult;
@@ -1784,7 +1815,7 @@ export interface DateTrigger {
 }
 export type WorkflowApprovalMode = "single" | "any" | "all" | "sequence";
 export type WorkflowFieldPolicy = "hidden" | "readonly" | "edit" | "edit_required";
-export type WorkflowCommand = "approve" | "reject" | "return" | "transfer" | "delegate" | "add_assignee" | "resubmit" | "withdraw" | "terminate" | "cc" | "admin_reassign" | "admin_override" | "retry_resolution";
+export type WorkflowCommand = "save_form" | "approve" | "reject" | "return" | "transfer" | "delegate" | "add_assignee" | "resubmit" | "withdraw" | "terminate" | "cc" | "admin_reassign" | "admin_override" | "retry_resolution";
 export type WorkflowExpression = {
     op: "literal";
     value: unknown;
@@ -1812,11 +1843,29 @@ export interface WorkflowApprovalNode {
     onReject: string;
     allowedOperations?: WorkflowCommand[];
     returnTargets?: string[];
+    /** Immutable reference to an application-owned task page input contract. */
+    taskPageCode?: string;
+    /** Code-owned defaults; labels never change the stable command semantics. */
+    operationPolicy?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy>>;
+    /** Explicit upper bound for administrator changes. Topology remains immutable. */
+    administration?: WorkflowApprovalAdministration;
     fieldPolicy?: {
         default?: WorkflowFieldPolicy;
         fields?: Record<string, WorkflowFieldPolicy>;
     };
 }
+export type WorkflowConfigurableOperation = 'approve' | 'reject' | 'return' | 'transfer' | 'delegate' | 'add_assignee';
+export type WorkflowConfigurableAssigneeProvider = 'fixed_users' | 'app_role' | 'app_role_in_scope';
+export interface WorkflowNodeOperationPolicy {
+    label?: string;
+    /** Only approve/reject have comments; existing required reasons stay required. */
+    commentRequired?: boolean;
+}
+export interface WorkflowApprovalAdministration {
+    modes?: WorkflowApprovalMode[];
+    assigneeProviders?: WorkflowConfigurableAssigneeProvider[];
+    operations?: WorkflowConfigurableOperation[];
+}
 export interface WorkflowConditionNode {
     id: string;
     kind: "condition";
@@ -1834,7 +1883,21 @@ export interface WorkflowEndNode {
     title: string;
     outcome: string;
 }
-export type WorkflowNode = WorkflowApprovalNode | WorkflowConditionNode | WorkflowEndNode;
+export interface WorkflowCcAdministration {
+    assigneeProviders?: WorkflowConfigurableAssigneeProvider[];
+}
+/** Recipients are frozen on entry; topology, empty policy and notification are code-owned. */
+export interface WorkflowCcNode {
+    id: string;
+    kind: 'cc';
+    title: string;
+    binding: string;
+    next: string;
+    emptyPolicy: 'block' | 'skip';
+    notify?: boolean;
+    administration?: WorkflowCcAdministration;
+}
+export type WorkflowNode = WorkflowApprovalNode | WorkflowConditionNode | WorkflowEndNode | WorkflowCcNode | WorkflowBusinessStepNode;
 export interface WorkflowDefinition {
     schemaVersion: typeof SCHEMA_VERSIONS.workflowDefinition;
     code: string;
@@ -1858,6 +1921,10 @@ export interface WorkflowDefinition {
         };
     };
     nodes: Record<string, WorkflowNode>;
+    /** Code-owned page definitions, independent of node administrator settings. */
+    taskPages?: Record<string, import('./native-compiler/workflow-task-page.js').WorkflowTaskPage>;
+    /** Read-only explanations versioned with the executing definition. */
+    readability?: import('./native-compiler/workflow-graph.js').WorkflowReadability;
 }
 export interface WorkflowInstanceCommandPolicies {
     withdraw?: {
@@ -1898,6 +1965,127 @@ export interface WorkflowBindingEntry {
     max?: number;
     /** Long-term delegation is enabled by default for eligible role-bound providers. */
     delegatable?: boolean;
+    /** Code-owned dimensions and native sources; administrators only maintain bounded rules. */
+    routing?: WorkflowAssignmentRoutingPolicy;
+}
+export interface WorkflowAssignmentRoutingPolicy {
+    policyCode: string;
+    title: string;
+    strategy: 'replace_then_append' | 'replace_only';
+    dimensions: Record<string, {
+        title: string;
+        valueFrom: string;
+    }>;
+    sources: Record<string, {
+        title: string;
+        provider: 'app_role' | 'app_role_in_scope';
+        roleCode: string;
+        scope?: {
+            dimension: string;
+            valueFrom?: string;
+            value?: string;
+        };
+    }>;
+}
+export interface WorkflowAssignmentRoutingRule {
+    ruleCode: string;
+    title: string;
+    enabled: boolean;
+    workflowCode?: string;
+    nodeId?: string;
+    matches: Record<string, string[]>;
+    sourceCode: string;
+    effect: 'append' | 'replace';
+    priority: number;
+    validFrom?: IsoDateTime;
+    validTo?: IsoDateTime;
+}
+export interface WorkflowAssignmentRoutingConfiguration {
+    schemaVersion: 'openxiangda.workflow-assignment-routing/v2';
+    policy: WorkflowAssignmentRoutingPolicy;
+    revision: number;
+    rules: WorkflowAssignmentRoutingRule[];
+    updatedBy: string | null;
+    updatedAt: IsoDateTime | null;
+    headRevision: number;
+    effect: 'future_node_entries_keep_existing_tasks';
+    references: Array<{
+        workflowCode: string;
+        nodeId: string;
+        pinned: boolean;
+    }>;
+}
+export interface WorkflowAssignmentRoutingMutation {
+    environmentKey?: DeploymentEnvironment;
+    expectedHeadRevision: number;
+    expectedRevision: number;
+    operationId: string;
+    reason: string;
+    rules: WorkflowAssignmentRoutingRule[];
+}
+export interface WorkflowAssignmentRoutingReceipt {
+    policyCode: string;
+    revision: number;
+    rules: WorkflowAssignmentRoutingRule[];
+    updatedBy: string;
+    updatedAt: IsoDateTime;
+    effect: 'future_node_entries_keep_existing_tasks';
+    replayed: boolean;
+}
+export interface WorkflowRoleReference {
+    workflowCode: string;
+    workflowTitle: string;
+    nodeId: string;
+    nodeTitle: string;
+    roleCode: string;
+    definitionVersion: number;
+    bindingVersion: number;
+    definitionDigest: Sha256Digest;
+    bindingDigest: Sha256Digest;
+    configurationRevision: number;
+    contexts: Array<'active' | 'in_flight'>;
+    source: 'default_binding' | 'node_override' | 'routing_source';
+    provider: 'app_role' | 'app_role_in_scope';
+    routingSourceCode?: string;
+    scopeDimensionCode?: string;
+}
+export interface WorkflowRoleReferencePage {
+    schemaVersion: typeof SCHEMA_VERSIONS.workflowRoleReferencePage;
+    roleCode: string;
+    items: WorkflowRoleReference[];
+    total: number;
+    limit: number;
+    offset: number;
+    meaning: 'potential_nodes_keep_existing_tasks';
+}
+export interface WorkflowAssignmentRoutingCatalog {
+    items: Array<{
+        policyCode: string;
+        title: string;
+        revision: number;
+        ruleCount: number;
+        referenceCount: number;
+    }>;
+    total: number;
+    limit: number;
+    offset: number;
+}
+export interface WorkflowAssignmentRoutingHistory {
+    items: Array<{
+        id: string;
+        revision: number;
+        actorUserId: string;
+        reason: string;
+        before: {
+            revision: number;
+            rules: WorkflowAssignmentRoutingRule[];
+        };
+        after: WorkflowAssignmentRoutingReceipt;
+        createdAt: IsoDateTime;
+    }>;
+    total: number;
+    limit: number;
+    offset: number;
 }
 export interface WorkflowBinding {
     schemaVersion: typeof SCHEMA_VERSIONS.workflowBinding;
@@ -1908,6 +2096,10 @@ export interface WorkflowBinding {
 export interface WorkflowNodeConfigurationPatch {
     title?: string;
     description?: string;
+    mode?: WorkflowApprovalMode;
+    operations?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy & {
+        enabled?: boolean;
+    }>>;
     assignee?: {
         provider: "fixed_users";
         users: string[];
@@ -1934,7 +2126,12 @@ export interface WorkflowNodeConfigurations {
         defaults: {
             title: string;
             binding?: WorkflowBindingEntry;
+            mode?: WorkflowApprovalMode;
+            allowedOperations?: WorkflowCommand[];
+            operationPolicy?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy>>;
+            fieldPolicy?: WorkflowApprovalNode['fieldPolicy'];
         };
+        administration?: WorkflowApprovalAdministration;
         configuration: WorkflowNodeConfigurationState;
         effective: {
             revision: number;
@@ -1942,6 +2139,10 @@ export interface WorkflowNodeConfigurations {
             description?: string;
             binding?: WorkflowBindingEntry;
             bindingDigest?: string;
+            mode?: WorkflowApprovalMode;
+            allowedOperations?: WorkflowCommand[];
+            operationPolicy?: Partial<Record<WorkflowConfigurableOperation, WorkflowNodeOperationPolicy>>;
+            fieldPolicy?: WorkflowApprovalNode['fieldPolicy'];
         };
     }>;
     principals: {
@@ -1969,6 +2170,19 @@ export interface WorkflowNodeConfigurations {
         createdAt: IsoDateTime;
     }>;
 }
+export interface WorkflowNodeConfigurationMutation {
+    expectedHeadRevision: number;
+    expectedRevision: number;
+    operationId: string;
+    reason: string;
+    patch: WorkflowNodeConfigurationPatch | null;
+}
+export interface WorkflowNodeConfigurationReceipt extends WorkflowNodeConfigurationState {
+    workflowCode: string;
+    nodeId: string;
+    effect: 'future_node_entries_keep_existing_tasks';
+    replayed: boolean;
+}
 export type ApplicationAdministrationPage = "overview" | "data" | "workflows" | "instances" | "automation" | "roles" | "versions" | "runtime" | "audit";
 export interface ApplicationAdministrationContext {
     schemaVersion: "openxiangda.application-admin-context/v2";
@@ -2451,6 +2665,7 @@ export interface WorkflowSurface {
     navigationTarget: WorkflowNavigationTarget | null;
     instance: WorkflowInstance | Record<string, unknown>;
     task: WorkflowTask | Record<string, unknown> | null;
+    taskForm?: import('./native-compiler/workflow-task-page.js').WorkflowTaskFormSurface;
     presentation: WorkflowSurfacePresentation;
     fieldPolicy: {
         default: WorkflowFieldPolicy;